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SPECIFICATION 



To all whom it may concern: 

Be It Known, That we, Gameelah Ghafoor, Ah mar Ghafoor, Marie Macintyre 
and Anthony S. Holmes, of Dundee, United Kingdom, Dundee, United Kingdom, 
Edinburgh, United Kingdom and Dundee, United Kingdom, respectively, have invented 
certain new and useful improvements in SELF-SERVICE TERMINAL, of which we 
declare the following to be a full, clear and exact description: 




9457,00 



Background of the Invention 

The present invention relates to a self-service terminal (SST) and to a method of 
operating an SST. In particular, the invention relates to an automated teller machine (ATM), 
and to a method of operating an ATM. 

ATMs provide users with a convenient source of cash in an unattended environment. 
5 However, to benefit from this convenience a user must be able physically to access an ATM, 
and must also be able to input data requested by the ATM such as a personal identification 
number (PIN), an amount of cash to be withdrawn, and such like data. As a result, certain 
people are not able to use ATMs, for example, because they are confined to a home, because 
they have a visual impairment, because an ATM is located in an area that is not physically 
10 accessible for them, or such like reason. 

To overcome this problem, some people entrust their ATM card and PIN to a third 
party for conducting transactions on their behalf; but this is undesirable because it may lead 
to fraud, for example, if the third party withdraws more money than they are asked to 
withdraw, or if the third party makes unauthorized withdrawals. 



Summary of the Invention 

15 It is among the objects of an embodiment of the present invention to obviate or 

mitigate one or more of the above disadvantages, or other disadvantages associated with 
conventional SSTs. 

According to a first aspect of the present invention there is provided a self-service 
terminal having a user interface including means for identifying a user, characterized in that 
20 the terminal includes means for obtaining contact information for a communications device 
associated with a user; and contact means for establishing a link with the communications 
device to allow a transaction to be entered thereby. 
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Preferably, an entire transaction is entered using the communications device, where 
an entire transaction includes entry of an identification, such as a PIN, and entry of 
transaction data, such as an amount of money to be withdrawn. 

The communications device is retained by a user, and is used as an alternative to any 
5 input device on the SST, such as a keypad, touchscreen, function display keys (FDKs), or 
such like. Thus, the communications device is used as an alternative input means. 

In one embodiment, the communications device is located remotely from the SST 
during a transaction. This allows a person ("the user") to enter a transaction at a remote 
location while another person, who is located at the SST, receives any item dispensed from 
10 the SST as a result of the transaction entered by the user. 

By virtue of this embodiment of the invention an account holder ("the user") who is 
unable to access or use an ATM is able to provide a third party with a token that the third 
party presents to the ATM. The account holder ("the user") is contacted by the ATM when a 
transaction is to be entered. The account holder can then enter a security code (such as a 
15 PIN) and transaction details (such as withdraw twenty pounds sterling). This enables an 
account holder to allow a third party to collect money or other media from their account 
using an ATM, without having to divulge a PIN or other security code to the third party, 
thereby minimizing the potential for abuse of trust. 

In another embodiment, the communications device is located locally at the SST 
20 during a transaction so that the person who operates the communications device ("the user") 
is the person who receives any item dispensed from the SST as a result of the transaction. 

By virtue of this embodiment of the invention, a self-service terminal is operable to 
identify a user and to dial a user's telephone so that the user can enter a transaction using the 
telephone rather than the terminal's user interface. One advantage of this embodiment of the 
2 5 invention is that the user does not have to determine the telephone number of the SST, 
because the SST calls the user's communications device once the user has been identified. 
For a visually-impaired user who has no difficulty in physically accessing an SST, this 
obviates any requirement for a third party to assist with a transaction. 
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It will be appreciated that "the user" referred to herein is the person who operates the 
communications device, not necessarily the person who is located at the SST. 

Preferably, the communications device is in the form of a telephone, such as a cellular 
telephone (for use in entering a transaction either locally at an SST or remotely from an SST) 
5 or a landline telephone (for use in entering a transaction remotely from an SST). 

Alternatively, the communications device is in the form of a computing device having a 
modem. Typical computing devices include a personal computer (PC), a pocket computer, a 
personal digital assistant, and such like. 

Preferably, the means for identifying a user comprises a module (such as a card 
10 reader) for receiving a physical identification token (a claimed identity), which is used in 
conjunction with an identity verifier, such as a personal identification number (PIN). 
Suitable card readers include a magnetic stripe card reader and a smart card reader. Other 
identification tokens may be used, such as a smart ring, smart button, personal digital 
assistant, or cellular telephone. Alternatively, in embodiments where the user is always 
15 located in the vicinity of the SST, the means for identifying a user may comprise a 

recognition module (such as a biometrics unit) for receiving a token derived from part of a 
user's body. Suitable biometrics units include a human iris recognition unit, a fingerprint 
sensing unit, a facial recognition unit, a voice recognition unit, and such like. 

The means for obtaining contact information for a communications device associated 
2 o with a user may be implemented by a controller accessing a database of stored telephone 
numbers. Alternatively, the telephone number may be retrieved from a user identification 
token (for example, the telephone number may be stored on a user's card), so the means for 
obtaining contact information may be implemented by a token reader (such as a card reader). 

The database stores a user identifier and a telephone number or numbers associated 
25 with that user. Where more than one telephone number is stored, an algorithm or rules 

engine may be used to determine which number is to be called, or the numbers may be called 
in a predetermined order or in an order determined by the rules engine. 
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The database may be stored on the SST, partially on the SST (for example, in a 
distributed storage arrangement), or in a remote repository. 

The contact means may contact the communications device directly, for example, by 
dialing a telephone number associated with the communications device. Alternatively, the 
5 contact means may contact the communications device indirectly, for example, by requesting 
a remote center to contact the communications device. The remote center may be a 
transaction host. 

The contact means may be implemented by a transceiver, such as a cellular radio- 
frequency transceiver. 

10 The self-service terminal may be an ATM. 

According to a second aspect of the present invention there is provided a method of 
operating a self-service terminal having a user interface, the method including the step of 
identifying a user, and being characterized by the further steps of: obtaining contact 
information for a communications device associated with the identified user, and establishing 
15 a telecommunications link with the communications device so that a transaction may be 
entered via the link. 

The step of identifying a user is preferably implemented by receiving an identity 
token. An identity verifier, such as a PIN or code, may be requested by the terminal after the 
link has been established so that the person presenting the claimed identity does not need to 
20 be aware of the identity verifier. 

According to a third aspect of the present invention there is provided a self-service 
terminal system comprising a host and at least one self-service terminal, each terminal having 
a user interface including transaction entry means and means for identifying a user, 
characterized in that the system includes means for obtaining contact information for a 
2 5 communications device associated with a user, and contact means for contacting the 
communications device to allow a transaction to be entered thereby. 



According to a fourth aspect of the present invention there is provided a self-service 
terminal for visually impaired users, the terminal comprising means for identifying a user, 
and means for contacting a communications device associated with that user, whereby a user 
may operate the terminal using the communications device. 

According to a fifth aspect of the present invention there is provided a self-service 
terminal having a user interface including transaction entry means and a token reader for 
reading an identification token, characterized in that the terminal is operable to read a token 
indicating that a transaction is to be entered using remote entry means, and includes contact 
means for contacting the remote entry means to allow a transaction to be entered thereby. 

Brief Description of the Drawings 

These and other aspects of the present invention will be apparent from the following 
specific description, given by way of example, with reference to the accompanying drawings, 
in which: 

Fig 1 is a block diagram of a self-service terminal system according to one 
embodiment of the present invention; 

Fig 2 is a schematic perspective view of one of the terminals of Fig 1 ; 

Fig 3 is a simplified block diagram of the architecture of the terminal of Fig 2; 

Figs 4a to 4d illustrate screens presented to a person located at one of the terminals of 
Fig 1 during a transaction; 

Fig 5 is a block diagram of a self-service terminal system according to another 
embodiment of the present invention; and 

Fig 6 is a simplified block diagram of the architecture of the terminal of Fig 5. 



Detailed Description 

Reference is now made to Fig 1, which is a block diagram of a self-service terminal 
system 10 according to one embodiment of the present invention. The system 10 is owned 
and operated by a financial institution and comprises a host 12 interconnected to a plurality 
of SSTs 14 (only two, 14a and 14b, are shown) by a secure network 16. The SSTs 14 are 
5 ATMs. The host 12 includes a communication interface 17, an authorization facility 18 and 
a back-office facility 20. 

The authorization facility 18 authorizes transaction requests received from ATMs via 
the network 16. The authorization facility 18 also authorizes transaction requests received 
from Point of Sale terminals (not shown) and other ATM networks (not shown). 

10 The back-office facility 20 maintains records for every account maintained by the 

financial institution. Each record includes a list of all the transactions executed relating to 
that account. Typical transactions include: direct credits, direct debits, checks, cash 
withdrawals, and such like. The back-office facility 20 provides (typically on a daily basis) 
the transaction authorization facility 18 with account information for each account 

1 5 maintained by the financial institution. 

The ATMs 14 are physically remote from each other, but are shown in proximity in 
Fig 1 for clarity. Fig 1 also shows a remote entry means 21 (also referred to herein as a 
communications device) in the form of a cellular telephone which can be accessed by the 
communication interface 17, as described in more detail below. 

20 Reference is now made to Fig 2, which is a perspective view of one of the ATMs 14 

of Fig 1. Each ATM 14 has a user interface 22 located within a molded fascia 24. The user 
interface 22 comprises: a display 26, local entry means 28 in the form of an encrypting 
keypad, a cash dispense slot 30, a card entry/exit slot 32, and a receipt slot 34. 

Reference is now made to Fig 3, which is a simplified block diagram of the 
25 architecture of the terminal of Fig 2. A system bus (or a plurality of system buses) 36 

interconnects various modules in an ATM controller 40 to allow mutual intercommunication, 
as will be described in more detail below. 



User associated modules 42 comprise the following elements (peripheral devices): a 
token reader 50 in the form of a card reader, the display 26, the encrypting keypad module 
28, a printer 56, and a cash dispenser 58. Some of these user associated modules 42 are part 
of the user interface 22 (such as the display 26 and the keypad 28), other user associated 
5 modules 42 are associated with the user interface 22 (such as the card reader 50, which is 
associated with, and located rearwardly of, the card entry/exit slot 32). 

The controller 40 comprises modules for driving the user interface elements, namely: 
card reader controller 60, display controller 62, keypad controller 64, printer controller 66, 
and dispenser controller 68. These user associated modules (26, 28, 50, 56, and 58) and 
l o associated controllers (60 to 68) are standard modules that are used in conventional ATMs 
and will not be described in detail herein. 

The controller 40 also comprises a BIOS 70 stored in non-volatile memory, a 
microprocessor 72, associated main memory 74, storage space 76 in the form of a magnetic 
disk drive, and a dedicated network connection 78 for connecting the ATM 14 to the 
15 transaction host 12 (Fig 1) via the network 16. 

In use, the main memory 74 is loaded with an ATM operating system kernel 80, and 
an ATM application 82. As is well known in the art, the operating system kernel 80 is 
responsible for memory, process, task, and disk management. The ATM application 82 is 
responsible for controlling the operation of the ATM 14, including: presenting screens on the 
20 ATM display 26, receiving data read by the card reader 50, preparing transaction requests for 
sending to the host 12 via the network connection 78, and receiving responses and commands 
from the host 12 via the network connection 78. 

The term "screen" is used herein to denote the graphics, text, controls (such as menu 
options), and such like, that are displayed on an ATM monitor; the term "screen" as used 
25 herein does not refer to the hardware (that is, the monitor) that displays the graphics, text, 
controls, and such like. 

If a person is unable to use an ATM or experiences difficulty in using an ATM, for 
example because of mobility problems or visual impairment, then that person provides the 



financial institution with a contact telephone number to be used during a transaction. The 
institution then issues that person (the account holder, also referred to herein as "the user") 
with a magnetic stripe card that stores a contact telephone number in addition to conventional 
details about the account holder and the account. The contact telephone number is the 
5 telephone number of the account holder's cellular telephone 21. 

Two person transaction example 

One example of a typical transaction at one of the ATMs 14 will now be given with 
reference to Figs 4a to 4d. In this example, the account holder wishes to withdraw cash from 
an ATM, and gives the card to a trusted third party, for example a friend or relative. Thus, in 
10 this example, the person entering transaction details is located remotely from the ATM 14, 
and a trusted third party is used to initiate the transaction at the ATM 14. 

Initially, the third party approaches an ATM 14 displaying screen 100 (Fig 4a) and 
inserts the card. The card reader 50 reads the magnetic stripe on the card and conveys the 
read details to the ATM application 82 via the card reader controller 60 and the bus 36. The 
15 ATM application 82 analyses these details and determines that the magnetic stripe stores a 
telephone number in addition to account details (for example, name of account, number of 
account, and such like). 

The ATM application 82 displays screen 102 (Fig 4b) to inform the person located at 
the ATM (in this example, the third party) that the transaction will be entered using a remote 
2 o entry device (that is, not using the ATM f s user interface 22). 

The ATM application 82 then uses network connection 78 to convey a file including 
account details and the telephone number to the communication interface 17 in host 12. The 
communication interface 17 receives this file and automatically dials the telephone number 
and activates an audio and/or visual interface. This embodiment uses an audio interface 
25 having recorded messages and selectable options associated with numbers so that a user can 
select an option by depressing a number on the telephone keypad. 

When the account holder answers this telephone call at the cellular telephone 21, then 
the account holder is first asked (by the audio interface) to enter a secure code. The secure 
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code may be the account holder's PIN, or it may be another code (referred to herein as an 
access code). The access code may be a subset of a longer code. For example, the account 
holder may be asked to enter the second, fourth, and fifth digits/letters of their access code. 
This may be used to improve security in case a fraudster attempts to eavesdrop or intercept a 
5 code as it is being entered by the account holder. 

Once the account holder has entered the secure code, a transaction menu is then 
recited to the account holder. The transaction menu may include options such as: bill 
payment, cash withdrawal, transfer funds between accounts, and such like. 

In this example, the account holder selects the cash withdrawal option, using either 
l o speech or a button on the telephone 2 1 . 

A cash withdrawal menu is then recited to the account holder. The account holder 
enters the amount of cash to be withdrawn. A confirmation menu may also be recited to 
allow the account holder to confirm the transaction details. 

The communication interface 17 then combines the transaction details and code 
15 entered by the account holder with the account details conveyed form the ATM 14 into a 
single transaction request file and sends the transaction request file to the authorization 
facility 18 for authorizing. 

If the transaction request is authorized then the host 12 notifies the ATM 14 and the 
ATM application 82 presents a screen 104 (Fig 4c) to the person located at the ATM (in this 
20 example, the trusted third party) to inform him/her to remove the card because cash is about 
to be dispensed. 

The communication interface 17 may also inform the account holder via cellular 
telephone 21 that the transaction has been executed and that cash has been dispensed. 

If the transaction request is not authorized, for example, because the secure code was 
25 incorrect or because adequate funds are not available, then the ATM application 82 presents 
a screen 106 (Fig 4d) to the trusted third party to inform him/her that the transaction was not 
authorized. 
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The communication interface 17 may also inform the account holder via cellular 
telephone 21 that the transaction has not been authorized. 

It will be appreciated that this embodiment has the advantage that an account holder 
can execute a transaction at an ATM without having to be present at the ATM, and without 
5 having to divulge their PIN or other secure code to enable the transaction to be executed, 
thereby reducing the possibility of fraud. It will also be appreciated that this embodiment has 
the advantage that an account holder can control a transaction in real time even though the 
account holder is located remotely from a terminal that fulfils the transaction. 

It will also be appreciated that in the above embodiment the means for obtaining 

1 o contact information for a communications device and the means for identifying a user are 

both implemented by the card reader 50 in conjunction with the card reader controller 60 and 
the ATM application 82. 

One person transaction example 

Another example of a typical transaction at one of the ATMs 14 will now be given. 
15 In this example, the person conducting a transaction is located in the immediate vicinity of 
the ATM 14, and initiates the transaction at the ATM 14 by inserting the card. 

The transaction proceeds in the same way as the above example, the only differences 
being that the account holder is present at the ATM, and the account holder removes the 
withdrawn cash. 

20 Second embodiment 

Another embodiment of the present invention will now be described with reference to 
Fig 5, which is a block diagram of a self-service terminal system 210 according to another 
embodiment of the present invention; and also with reference to Fig 6, which is a simplified 
block diagram of the architecture of the terminal of Fig 5. 

2 5 The system 21 0 is owned and operated by a financial institution and comprises a host 

212 interconnected to a plurality of SSTs 214 (only two, 214a and 214b, are shown) by a 
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secure network 16. The SSTs 214 are ATMs. The host 212 includes an authorization facility 
18 and a back-office facility 20. 

The ATMs 214 are similar to ATMs 14; but the ATM controller 240 in ATMs 214 is 
slightly different to the ATM controller 40 in ATMs 14. In particular, ATM controller 240 
5 includes contact means 21 7 in the form of a transceiver, and a modified ATM application 
282. 

In this embodiment, an ATM 214 communicates directly with a communications 
device 21 rather than via the communication interface 17. This is accomplished by the 
transceiver 217 dialing (under control of the ATM application 282) the communications 
10 device 21 and conveying data between the ATM application 282 and the communications 
device 21 . When the ATM application 282 has received from the communications device 21 
all data required for a transaction, the ATM application 282 obtains authorization for the 
transaction from the remote host 212 in a conventional manner. 

In a similar way as for the previous embodiment (Figs 1 to 4D), this embodiment can 
15 be used by an account holder who is present at the ATM during a transaction (the one person 
transaction example), or by an account holder who is remote from the ATM during a 
transaction (the two person transaction example). 

Various modifications may be made to the above described embodiments within the 
scope of the invention, for example, the communications device 21 may include an 
2 o encryption unit for increased security. In other embodiments, the ATM application 82 or 282 
may present the trusted third party with advertisements during the delay introduced by the 
account holder entering a transaction. In other embodiments, the person entering the 
transaction may be enabled to stop presentation of screens at the ATM while a transaction is 
being entered and executed. In other embodiments, the SST may be a non-cash kiosk. 



